IT Auditor 3+ (Cybersecurity Audit - Internal Only)

State of Washington; Olympia (WA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Full benefits package

Vacation and holidays

Training opportunities

Certification reimbursements

Diversity and inclusion focus

Job summary

The Office of the Washington State Auditor is seeking an IT Auditor III for internal cybersecurity audits. You will independently plan and lead audits of complex IT environments across state agencies, providing expert security recommendations.

Qualified candidates have a Bachelor's degree and at least four years IT audit experience; professional certifications such as CISA, CISSP, or GSEC are preferred. This role offers a hybrid work arrangement and a comprehensive benefits package.

Qualifications

• Bachelor’s degree and four years of audit experience which includes IT audit.
• Professional certifications such as CISA, GSEC, CISSP are preferred.
• Experience leading cybersecurity audits across complex IT environments.

Responsibilities

• Plan and lead cybersecurity audits for state agencies and local governments.
• Provide expert security recommendations to strengthen IT controls.
• Coordinate with audit staff and manage project objectives and timelines.

Skills

IT audit

CISA

GSEC

CISSP

Education

Bachelor's degree in a relevant field

Master's degree in data analytics, cybersecurity or closely related field

Tools

CISA Certification

GSEC Certification

CISSP Certification

Job description

This listing is for current employees of the Office of the Washington State Auditor

It Auditor 3+ - Cybersecurity Audit (Internal Only)

Be valued. Be challenged. Build a career.

At the State Auditor’s Office, we are working together to make a real difference in how government operates. We are always looking for new ideas to ensure our work provides value to the clients we serve, and we take pride in the services we perform for the governments and for the people of Washington.

We are committed to building and maintaining a workplace environment that is collaborative and supports all employees as we effectively carry out the agency’s mission. This includes ensuring inclusion and equity throughout the agency, while embracing the individual differences of our employees and clients. We believe that diverse perspectives and backgrounds are fundamental to doing our best work.

With 15 offices' statewide, 400 positions and important work to do, we always welcome talented people to join our team. Get to know us! We share more about who we are and what we do on social media, using the hashtag #WeAreSAO and on our website at: Current Openings and Internships - Office of the Washington State Auditor.

A job and benefits that support a healthy work/life balance.

The Washington State Auditor’s Office (SAO) prides itself in offering flexible schedules and a hybrid work environment that helps our staff balance work and life. We also offer a comprehensive package of health and wellness benefits to employees, including:

• Full benefits package. Click here to learn more.
• Paid vacation, sick leave and holidays.
• Growth and development opportunities, including 80+ hours of training each biennium
• Educational and professional certification reimbursements
• An agency-wide commitment to diversity, equity, inclusion and respect in the workplace

About Team Cybersecurity Audit:

Our team completes cybersecurity performance audits with State and Local governments to improve IT security. Our cybersecurity audits examine IT systems, looking for weaknesses that attackers could exploit and proposing solutions to help strengthen those systems.

Mission

We collaborate with governments to provide actionable recommendations to improve the security posture of IT systems supporting essential government operations and services.

1. Building trust and relationships with clients and others we work with.
2. Sharing knowledge about cybersecurity leading practices and available resources.
3. Scoping audits in a flexible manner that meets each auditee’s individual needs.
4. Completing quality and timely audits with prioritized recommendations.
5. Refining methods and approaches to stay relevant and meet emerging needs.

Vision

Secure government.

The Role of an IT Auditor 3

An IT Auditor III is responsible for overall audit planning through final audit presentation

of any size or level of complexity cybersecurity audits.

Independently leads audits that cover increasingly complex cybersecurity environments, which

may involve multiple state agencies, local governments or levels of government. Provides expert

level technical services in security for cybersecurity audits.

May lead larger, more complex audits and coordinate the efforts of other auditors to accomplish

the overall audit objectives under the direction of an assistant audit manager or audit manager.

These large audits involve multiple agencies or levels of government, have complex IT security

environments and several layers of applicable laws or regulations and require significant IT

security knowledge. May lead audits and projects that include multiple IT audit staff and be

responsible for the entire audit.

Note:

Relevant professional work and/or volunteer experience may substitute for education on a year-for-year basis.

Required qualifications:

• Bachelor’s degree and four years of audit experience which includes at least:
• two years in IT audit and
• has obtained either a relevant processional certification including but not limited to:
• Certified Information Systems Auditor (CISA)
• General Security Essentials Certification (GSEC)
• Certified Information System Security Professional (CISSP)
• or a master’s degree in data analytics, cybersecurity or closely related field.

Preferred Qualifications:

• Degree in a field applicable to IT security and/or analyzing government programs is strongly preferred.
• Preference may be given to candidate with experience with governments, performance auditing and/or accountability auditing and technical knowledge associated with cybersecurity.

To apply, please submit:

1) Your completed application through careers.wa.gov, including detailed responses to any supplemental questions

2) A letter of interest specifically addressing how you meet the qualifications listed in the announcement

*Pay for an IT Auditor 3+ will include assignment pay in addition to the salary listed.

Degrees awarded outside the United States must include a credential evaluation report.

If you are a US Veteran and would like to apply for Veteran's Preference, attach a copy of Form DD214 military record showing honorable discharge.

Questions may be directed to the applications unit at [e-mail].

The Washington State Auditor's Office is an equal opportunity employer. Persons with a disability, who need assistance in the application or testing process, or who need this announcement in an alternative format, may call [phone] or via the telecommunications relay service by dialing 7-1-1.